CVE detail
CVE-2024-27198 — JetBrains TeamCity Authentication Bypass Vulnerability
Published 2024-03-07 · Modified 2024-03-07 · Source kev
HIGH
severity
CVSS-derived band
0.9994
EPSS probability
exploitation probability, 30d
100.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2024-03-28
⚠ Actively exploited in the wild — CISA KEV listed 2024-03-07, federal remediation due 2024-03-28. RANSOMWARE
Description
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References